CVE-2025-68370: coresight: tmc: add the handle of the event to the path
In the Linux kernel, the following vulnerability has been resolved:
coresight: tmc: add the handle of the event to the path
The handle is essential for retrieving the AUXEVENT of each CPU and is required in perf mode. It has been added to the coresightpath so that dependent devices can access it from the path when needed.
The existing bug can be reproduced with: perf record -e csetm//k -C 0-9 dd if=/dev/zero of=/dev/null
Showing an oops as follows: Unable to handle kernel paging request at virtual address 000f6e84934ed19e
Call trace: tmcetrgetbuffer+0x30/0x80 [coresighttmc] (P) catuenablehw+0xbc/0x3d0 [coresightcatu] catuenable+0x70/0xe0 [coresightcatu] coresightenablepath+0xb0/0x258 [coresight]
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-68370?
CVE-2025-68370 has been classified as a low-severity vulnerability affecting the Linux kernel.
How do I fix CVE-2025-68370?
To fix CVE-2025-68370, update your Linux kernel to the latest version that includes the necessary patches.
Who is affected by CVE-2025-68370?
CVE-2025-68370 affects users of the Linux kernel that utilize the coresight path for performance events.
What are the implications of CVE-2025-68370?
The implications of CVE-2025-68370 may include potential inefficiencies in event handling for performance monitoring.
Is there a workaround for CVE-2025-68370?
There is no known workaround for CVE-2025-68370; the recommended approach is to apply the kernel update.